Protecting Our Own Tenant in a Multi-Tenant SaaS

How we treat Diversio's own tenant inside Optimo as the hardest one to reach, using layered controls across Django admin, approvals, Postgres RLS, IAM and automation.